search for: lmcompatibility

Hello I was wondering if there is a parameter that can be set in order to be able to run samba and communicate with a windows domain controller which sets a registry key called lmcompatibility to 5. I am running samba 2.2.5, and realize I may need to upgrade to a newer version. Could you give me a heads up on this capability. Thank you! Erika Holzer

Hi, I have been having issues with NTLMv2 on newly provisioned domains, using Samba 4.1 from backports on Debian Wheezy. Everything seems to be working fine, except for NTLMv2 authentication with Squid and "ntlm_auth" on newer Windows versions. If I set "Lmcompatibility" down on the Windows PCs, then authentication works, but that is temporary workaround at best. I have tried installing and reinstalling on numerous VMs, trying to isolate the cause, but to no avail, and I know the config is working, since copying a previously provisioned domain (/etc/samba/sm...

Hi, i have problems connecting to DFS-Share from Client WindowsXP. Same configuration works fine for Windows Vista and 7. On Windows 7 the LMCompatibility Level is 3. the striking point I see in logfile is following 2010/12/20 10:30:17, 1] smbd/service.c:make_connection_snum(1119) 10.184.144.171 (10.184.144.171) signed connect to service applbin initially as user useracc (uid=45110, gid=45110) (pid 20312) [2010/12/20 10:30:17, 3] smbd/sec...

...able to authenicate (smbclient -L SERVER -U user%passwd). From a Win95 client, they just get "The password is incorrect". The Win95 client authenicates against a 2000 server. The pertinent regisrty settings look like: [HKEY_LOCAL_MACHINE\System\CurrentControlSet\control\LSA] "LMCompatibility"=dword:00000003 [HKEY_LOCAL_MACHINE\System\CurrentControlSet\control\LSA\MSV1_0] "NtlmMinClientSec"=dword:00080000 I've verified the Secur32.dll on the Win95 is the 128-bit version, and that Winsock 2.0 update and DUN 1.3 are installed. If I use "security = domain&quo...

...> > > Usually it is the client stuck in a loop trying Negtiate/NTLM auth for > > some reason. Some old Firefox, most Safari, and older IE can all get > > stuck trying those credentials and ignoring the offers of Basic. > > > > It might be possible to figure out some LmCompatibility settings change > > that makes the problem just go away (eg, forcing NTLM of all versions to > > disabled on the client). > > > > Other than that Squid does have some workaround responses it can be made > > to send back that might help the client reach the right conclu...

...ly it is the client stuck in a loop trying Negtiate/NTLM auth for > > > some reason. Some old Firefox, most Safari, and older IE can all get > > > stuck trying those credentials and ignoring the offers of Basic. > > > > > > It might be possible to figure out some LmCompatibility settings > change > > > that makes the problem just go away (eg, forcing NTLM of all versions > to > > > disabled on the client). > > > > > > Other than that Squid does have some workaround responses it can be > made > > > to send back that migh...